3.0

Lab Manager Installation and Upgrade Guide
22 VMware, Inc.
Security Recommendations and Requirements
ReviewtherecommendationforinstallingSSLcertificatesandrequirementforcertain
policiesinahigh‐securityenvironment.
VMwarerecommendsusinganSSLcertificateontheLab ManagerServersystem.
Installing or Customizing the SSL Certificate
VMwarerecommendsinstallinganSSLcertificatefromatrustedcertificationauthority
thatvalidatestheserveridentity.GeneratetheSSLcertificatewiththedomainnameor
IPaddressforaccessingtheLab ManagerServer.
IfyoudonotinstalltheSSLcertificate,VMwaregeneratesone,butSSLsecurity
warningsappearinthebrowser.
YoucanuseOpenSSLtogenerateacustomSSLcertificatewithadifferentnamethan
theoneVMwaregenerates.VMwarerecommendsgeneratingthecustomcertificateon
theLab ManagerServersystem.
To use OpenSSL to generate a custom SSL certificate
1 DownloadandinstallOpenSSLontheLab ManagerServersystem.
2 CreateafilenamedOpenSSlVMware.cfginaworkingdirectory.
Thefollowingisa
whatasamplefilemightlooklike:
# Conf file that vpx uses to generate SSL certificates.
[ req ]
default_bits = 1024
default_keyfile = rui.key
distinguished_name = req_distinguished_name
#Don't encrypt the key
encrypt_key = no
prompt = no
string_mask = nombstr
[ req_distinguished_name ]
countryName = US
stateOrProvinceName = CA
localityName = CA
0.organizationName = VMware, Inc.
organizationalUnitName = VMware, Inc.
commonName = machine1
emailAddress = [e-mail]